Cloud Architect -Database Access Control Toolkit

Cognizant; Concord (NH); Remote; USD 125,000 - 135,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

401(k) plan

Paid holidays/PTO

Disability insurance

Parental leave

Employee stock purchase plan

Job summary

Cognizant is seeking a Cloud Architect to design and implement cloud-native database access controls (DACT) across AWS environments. The role focuses on RBAC/ABAC models, secure database architectures, and integration of IAM/SSO with database authorization.

You will work on migration and modernization initiatives for database platforms, ensuring compliance with governance and security requirements while producing runbooks and technical documentation.

Qualifications

• Experience designing and implementing cloud-native database access controls (DACT).
• Strong knowledge of RBAC and ABAC policies and how they map to databases.

Responsibilities

• Design and implement cloud-native DACT frameworks.
• Develop RBAC and ABAC models for database access.
• Configure and manage database security controls (roles, privileges, schemas, grants).
• Integrate AWS IAM, SSO, and federated authentication with database authorization.

Skills

Sybase ASE/DB2

Aurora PostgreSQL

AWS Security & Identity

Cloud DB Architecture

RBAC/ABAC Authorization

Job description

Role: Cloud Architect -DACT

Location: Remote (Anywhere in USA)

Please note, this role is not able to offer visa transfer or sponsorship now or in the future

Job Description:

• DACT (Database Access Control Toolkit) is a regulatory-required and TR-mandated control that currently only works for Aurora and DynamoDB. Designing and implementing cloud-native database access controls, extending existing DACT coverage where feasible and building replacement capabilities where required. Removing the top blocker for Sybase ASE/DB2 to Aurora PostgreSQL database migration
• Design and implement cloud-native Database Access Control (DACT) frameworks.
• Develop and administer Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.
• Configure and manage database security controls, including roles, privileges, schemas, grants, and row-level security.
• Implement and govern database access policies across multiple database platforms.
• Integrate AWS IAM, SSO, and federated authentication mechanisms with database authorization frameworks.
• Design secure database architectures for AWS cloud environments.
• Ensure compliance with enterprise security, governance, audit, and regulatory requirements.
• Support cloud database modernization and migration initiatives.
• Develop automation for database provisioning, security controls, and compliance reporting.
• Collaborate with security, cloud, infrastructure, and application teams to establish enterprise-wide database security standards.
• Produce technical documentation, operational runbooks, and security procedures.

Looking for expert skills in the below areas:

• Sybase ASE/DB2
• Aurora PostgreSQL
• AWS Security & Identity Management
• Cloud Database Architecture & Migration
• RBAC & ABAC Authorization Models

Salary and Other Compensation:

The annual salary for this position is between $125,000 to $135,000 yearly depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans.

Benefits:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Disclaimer: The compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.